Auditing Informix database connections

inge

 

By Inge Halilovic, IBM Analytics Platform

 

Preserving integrity of information and managing compliance control across heterogeneous environments is becoming increasingly critical. IBM Security Guardium has worked with Informix for many years now  and  with Informix 12.10.xc6, you have increased capabilities when you audit the user actions for your Informix database server with IBM Security Guardium, version 10.0. Guardium prevents leaks from databases, ensures the integrity of information, and automates compliance controls across heterogeneous environments.

Guardium can now:

  • Mask sensitive data in Informix databases.
  • Audit, and close, any Informix connection (if necessary,), regardless of the connection protocol. Previously, Guardium audited and closed only TCP connections.

On the Informix side, you use the new ifxguard utility to monitor connections that are audited by Guardium. Every time a user session attempts an action that is auditable, an ifxguard agent contacts the Guardium server. The Guardium server audits the connection and takes any appropriate action. You can customize the behavior of the ifxguard utility:

  • Set the logging mode
  • Set the number of ifxguard worker threads to prevent heavy locking

You can enable auditing and set the actions of the database server if the Guardium server does not respond in the timeout period by setting the new IFXGUARD configuration parameter in the onconfig file. For example, if the timeout period is exceeded, the Informix server can allow the client connection without auditing, trigger an alarm, disable auditing altogether, or shut down.

The 2016 IIUG conference will include sessions by experts that cover this topic in greater detail. If you are interested in learning more you can Register for the conference and attend the session on auditing with IBM Security Guardium to find out how to configure auditing for your Informix database server.

The conference will be held from May 4th – 8th at the Sawgrass Marriott Golf Resort & Spa, Ponte Vedra Beach, Florida, USA.  The good news is that IIUG members get Flat $100 off on the registration fees. You can register here – http://bit.ly/iiug2016reg.

One Response to Auditing Informix database connections

  1. This blog is very nice.Database auditing includes watching a database in order to know about the activities of database clients. for more information visit here:- https://www.datasunrise.com

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: